I am not sure if one exists yet or not. That email denotes using usergroups which is a drawback because usergroup inclusion must be specified at user creation and cannot be done in a ALTER statement.
The way I have done it is to have the DBA user create say 2 RESOURCE level users to *own* the respective database tables, etc. You have to grant rights to the DBA user for both of the user's set of objects then have the DBA user define ROLES with permissions that allow cross-user object access. Then later should you have to add a new user just have the DBA add the user(s) to a particular ROLE and that should do it. Very similar to the canned ROLES setup found in MSSQL Server v7. Unfortunately, using this method, I experienced that specifying a wildcard (e.g., all tables = "<USER>"."*") is not possible so you must go through and specify each object you want to allow access to. This is tedious I know but this does give you flexibility of adding/removing/altering user permissions past that of the CREATE USER stage when employing the use of a USERGROUP. Also, this setup allows you to run multiple (pseudo) databases in a single server instance. Was this what you were looking for? -----Original Message----- From: Thomas Stegbauer [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 11:31 AM To: Kevin Wilson Cc: [EMAIL PROTECTED] Subject: grant command & wildcard --> wiki howto hi kevin, you wrote on 2003-04-11 that the above statement could a candidate for a wiki howto. http://listserv.sap.com/pipermail/sapdb.general/2003-April/036927.html does such a howto already exist? greetings thomas -- # Thomas Stegbauer # http://www.keyserver.de:11371/pks/lookup?op=get&search=0xFF837A1A # Key fingerprint = E469 F5DC 42FB B530 F5CB 99CB CEB2 BFC6 FF83 7A1A _______________________________________________ sapdb.general mailing list [EMAIL PROTECTED] http://listserv.sap.com/mailman/listinfo/sapdb.general
